What’s in the new security stack?

• Identity & Access Management (IAM) – Seamlessly authenticate all remote interactions with business applications with adaptive MFA (Multi-Factor Authentication) and SSO (Single Sign-On). Plus, eliminate all manual work related to passwords and permissions:, to fully-automated employee onboarding, offboarding and role change provisioning to enable quick growth. 
• Zero Trust Access Governance – Secure the environment where employee-application interactions occur by letting only authorized transactions through. Minimize attack surface by enforcing authentication and authorization for employees and limit their access to enterprise resources based on the least privilege principle.
• Open Source Security – Monitor and detect open-source dependencies in your code, flag and remediate vulnerabilities – all prior to production. Allow your developers to speed up coding using open source repositories, with no pigs-in-a-poke. 
• Cloud Workload Protection – Auto-detect & eliminate excessive permissions and misconfigurations in your public cloud workload. Block and correlate suspicious access attempts to sensitive data and exfiltrate it from the cloud. Reduce toil with automated hardening and prioritized alerts.
• End-to-End Compliance Platform – Simplify security audits and controls with one place to manage all security compliance checklists, and automate evidence collection from other business applications – Whether you’re an enterprise, a public organization, a B2B vendor, or a B2C company handling user PII.

How to ensure your stack is up-to-date and future proof?

Today’s enterprise security solutions should have a few traits to be part of this new security stack:

• SaaS Consumption Model – No more hardware-based appliances you need to plan and pay for years in advance. The ability to scale your usage up or down and pay for what you use is crucial in today’s rapidly changing reality. Automatic updates to the solution, (ensure a solution is always up-to-date) closing the consumption gap by inheriting the new features of each update.
• DevOps & Integrations – The ability to integrate with existing tools and components within the company’s IT / DevOps environment: communication & collaboration apps (Slack), centralized monitoring / SIEM (Sumo Logic), API interface to make configuration changes or view reports, Active Directory, GSuite / Office365, HR Systems and other enterprise apps. No more UI-only based solutions you must manage from dedicated interfaces. Born in the cloud and originally designed for cloud environments – not converted. 
• Noise-Free Alerts & Remediation – The ability to learn the company’s normal patterns and alert / act only on highly suspicious, true positive anomalies. Solutions that have AI or ML capabilities, using big data to determine which activities are malicious and require intervention, and in what priority.
• Compliance Assistance – Using security solutions that enable compliance with the common security standards such as PCI-DSS, ISO-27001, SOC2, etc. By implementing them, companies can achieve security compliance faster with fewer efforts involved.

Conclusion

Cybersecurity threats grow at a rapid pace as new technologies emerge. CIOs and CISOs are in a constant race to beat the bad actors and deploy the best in class security solutions. Make sure you evaluate new security solutions based on the traits above, consult with cybersecurity partners that deal with these challenges on a daily basis, in order to get you to be protected, not just covered in the 4 areas described in this post.

Contact us to update your security stack for today’s business challenges and cybercrime threats.